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Description 

[0001] Cross-reference is made to U.S. Serial No. 
09/088.205 (Attorney File No. 3735-905-CON) filed 
June 1, 1998, which is a continuation of Serial No. 
08/600.311 (for "PERIPHERAL DEVICE DOWNLOAD 
METHOD AND APPARATUS" filed February 12, 1996). 
both incorporated herein by reference. 
[0002] The present invention relates to a method 
and apparatus for downloading information to a gaming 
device and in partcutar. to a process for using a compu- 
ter, directly or remotely, to transfer information to a gam- 
ir^g devnce in a secure fashion. 

BACKGROUND INFORMATION 

[0003] Many cunent gaming machines are config- 
ured with electronic components, conrvnonly mounted 
on one or more printed circuit boards (PCBs). Many 
such et ctronic components use programming or other 
information stored in memories. In at least one typical 
configuration, a gaming terminal or gaming machine will 
irKlude a controller board, a communications board or 
modut . and one or nx>re so-called peripheral boards 
such as a display corrtroller board, a currency acceptor 
board, a coin handler board, and the like. Typically at 
least one board, such as the game controller board, 
includes a processor (e.g.. a microprocessor) or other 
computer urtt which often operates l>ased on program- 
ming or other information (software) stored in a memory 
such as one or nrxxe electronically erasable program- 
mable read-only memories (EEPROMS). Such software 
may be programmed or stored in the memory locations 
during the manufacturing or assembly of the gaming 
device. Additionally, software may be provided to 
replace or supplement the software in a gaming device 
which is in operaton (in the field), e.g. to add new fea- 
tures, implement new games and the like, and/or to cor- 
rect programming errors. In either case, the new 
software is transferred or "downloaded" from a source 
(which may t>e. e.g., a computer such as a workstation 
personal computer, laptop computer, arxl the like) to the 
"target" memory in a particular gaming terminal or 
nr^chine. 

[0004] Downloading from one computer to another 
is a process that is known, in general. In one previous 
syst m, information from a host system such as a state 
lottery host has been downloaded to a clerk validation 
terminal (CVT). A clerk validation terminal is used for 
verifying a ticket obtained from a lottery terminal e.g. to 
verify a validation number, amount and the like before a 
lottery ticket is paid. e.g. as an anti-counterfeiting proce- 
dure. However, downloading software to conponents of 
gaming devices and/or to a plurality of gaming devices 
or components thereof presents particular problems not 
readily addressed by conventional downloading tech- 
niques. 

[0005] One aspect applicable to gaming devices is 



the stringent regulatory oversight and control exercised 
by regulatory authorities in many jurisdictions. In many, 
and pertiaps all, regulated gaming jurisdictions, down- 
loading of software to a gaming terminal will not be per- 

5 mitted without some assurance that the new software 
will comply with local regulations 
[0006] For example, a gaming regulatory authority 
in one jurisdiction nnay require assurance that down- 
loading to. e.g., update bill acceptor software will result 

10 in a machine having bill acceptor software appropriate 
(and approved) for tiiat jurisdiction (and will not. e.g., 
run the risk of inadvertently arxl/or intentionally down- 
loading bill acceptor software tinat was approved in a dif- 
ferent jurisdiction). 

IS [0007] It is also commonly found that gaming 
devices occur in a wide variety of configurations, such 
as employing numerous different types of processors, 
memories, game configurations . versions and types, 
peripheral hardware and software and the like. Addition- 

20 ally, owing to differences in manufacturing dates, main- 
tenance history and the like, gaming devices are often 
encountered with a wide variety of different hardware 
and software conrponents which may not be apparent 
(or may be discernable only with difficulty) from a visual 

25 inspection of the gaming device, its connponents, or its 
operation. For this reason, when it is desired to down- 
load software to a particular gaming terminal, it is tyi:M- 
cally necessary to select a particular software version 
for downloading, bearing in mind tiie types of software 

30 and hardware found on the particular gaming terminal, 
lest tiie newly-downloaded software is incompatible with 
the gaming terminal or results in operation which is not 
approved by a particular jurisdiction. Additionally, it is 
possible that tiie software which is to be downloaded is, 

35 in ^ct, already present on a particular gaming terminal, 
so that tiie download process represents a waste of 
time and effort. 

[0008] Although many types of memories can be 
modified to store other or additional progranrs (such as 

40 an erasable programmable read-only memory or 
EPROM). In many previous devices this was often a 
labor-intensive and time-consumptive procedure, some- 
times involving removing tiie EPROM or other memory 
device and reprogramming it in a separate device 

45 and/or replacing it with a differentiy-programmed mem- 
ory device. Many pin-type memory devices are config- 
ured to tolerate only a limited numt>er of removal and 
ir^ertion operations. Other merrK>ry devices are config- 
ured for solder connection or are otherwise not readily 

50 replaceable, necessitating replacement of an entire 
board to effect updating. 

[0009] Such manual operations have, in the past, 
typically required a significant investinent of time, espe- 
cially when a relatively large number of gaming termi- 
55 nals are toeing programmed or reprogrammed. To make 
matters worse, the time investment is typically made by 
relatively highly-trained personnel. Such investment of 
time by relatively highly-trained personnel represents a 
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significant expense involved in storing or ipdating gam- 
ing terminal programming or other information which, 
owing at least partly to the regulatory environment 
found lor gaming devices, was previously believed to be 
a largely unavoidable cost Furthermore, it has been 5 
found that even relatively highly-trained personnel have 
an undesiratily high error rate when attenrpting to per- 
form a download which may lead to inoperability or 
inrproper op^ation of a gaming device, or violation of 
gaming jurisdiction laws or rules and may require an 10 
addftional investmerrt of time to correct such a^rors. 
(0010] This situation is particularly burdensome in 
the context of gaming devices in which it is sometimes 
necessary or desirable to change the programming In a 
large nt^rter of peripheral devices in a relatively short is 
amount ol twne. One example of such a situation is 
when It IS desired to reprogram a bill acceptor, e.g. to 
thwart a prevKXiSly-unknown counterfeiting scheme. 
Previous fti^ems which required labor-intensive and 
time «itensA/e reprogramming methods increased the 20 
risk of tficuirvig I0SS6S during the time it took to perform 
this repfogrammmg for all the various gaming machines 
(e g . in a pknbt/ of different casinos) or their various 
conponents An important feature of the invention is 
that it allows for dCMrnload of data to multiple gaming 2S 
devices smiUtar>eously 

[00111 Arx3(f>er feature of many gaming devices 
which affects the manner in which revisions of software 
can r shoufo be performed is the fact that gaming 
devices are o*ten configured to dispense money so 30 
there is a potential for modifications or downloads to be 
performed »i an unauthorized fashion in such a manner 
as to create imauthorized or improper payouts. This is a 
potential which is typically not present in many other 
types of downfoads from one conputer to another. 35 
Accordingty. it « important, not only to gaming regula- 
tory authorities txit also to casinos or other game oper- 
ators, to achieve a level of confidence that not only will 
inadvertent (eg. cross-jurisdictional) downloads be 
avoided but there are procedures in place to avoid or 40 
prevent intentional or unauthorized downloads. 
[0012] Furthermore, previous reprogramming took 
place in a relatively conspicuous manner requiring per- 
sonnel to access the interior of each individual periph- 
eral and/or terminal, often for an extended period of 45 
tim . thus potentially alerting the counterfeiters that they 
had been detected and decreasing the likelihood of 
using the new software to identify (possibly leading to 
apprehension of) tiie counterfeiters. In addition, the time 
during which a machine was being fitted with the new so 
programs was time that the nrvachine was out of service 
and not generating revenues. 

[001 31 In some situations, it may be advantageous 
to update the programming of two or more different 
gaming terminals and/or two or more different periph- ss 
eral devices coupled to a single gaming device. Previ- 
ous metfiods would, in tfiis situation, typically have 
required separately accessing each of the gaming ter- 



minals BTtxMcx peripheral devices in order to modify or 
ipdate programming. 

[0014] As noted, it is often desirable to reprogram 
gaming ternninals, e.g. to accommodate new games, 
regulatory changes, correct bugs or other programming 
errors, install new features and the like. Preferatrfy. this 
should be acconplished with a minimum of down time 
of gaming devices (which often are intended normally to 
be accessible 24 hours a day) and a minimum of incon- 
venience to players. 

[0015] Accordingly, it wouW be advantageous to 
provide a m^hod and apparatus for downloading pro- 
gramming information in a manner which Is less lat)or- 
intensive and l^s costly tiian previously provided, pref- 
eraWy without requiring individual direct access to each 
peripheral device which is being reprogrammed. and 
preferatrfy while provkJing suff foient security and reliabil- 
ity safeguards that fully and partially automatic down- 
loads will be permitted by gaming regulatory auttiorities. 

SUMMARY OF THE INVENTION 

[0016] The present invention provides for securely 
loading information, received from an external device 
(such as a laptop or a networked central conrputer) to 
one or more gaming devices. Preferak)ly, the secure 
downloading system provides kJentiffoation. negotia- 
tion, data transfer and verification features. Identifica- 
tion involves obtaining infornnation for characterizing the 
hardware and/or software on a gaming terminal or other 
target. The identification information can be used to pro- 
vide assurance that the programming or other data to 
be downloaded and/or the download procedures are 
appropriate for tiie target device. Negotiation involves 
providing information from the source to the target, 
relating to the download, such as where to load, com- 
pression information (if any) and the like. Preferably the 
source requests approval from the target device before 
data transfer begins. Preferably, data transfer is per- 
formed block-wise with checking of each block. Verifica- 
tion can be performed by the source requesting a digital 
signature calculated from the transferred data, prefera- 
bly based on a putilic key decryption algoritiim. 
[0017] In one embodiment, the update or modified 
peripheral device program Is received in the gaming ter- 
minal (or other conputing device) firom an external 
device (such as a hand-heW or portable device or a cen- 
tral conputer coupled via a communications link) and is 
downloaded from tiie gaming terminal controller board 
to one or mor coupled peripheral devices. 
[0018] Preferably, the programming information is 
downloaded in such a way as to reduce or minimize the 
amount of down time or inconvenience to players. In 
one embodiment, when tiie new peripheral program is 
downloaded from a central conputer to each gaming 
terminal, the method avoids disabling all gaming termi- 
nals at the same time, such as by waiting until the gam- 
ing terminal is idle for a predetermined period before 
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downloading the new program to peripheral devices or 
by cycling through veu-ious gaming terminals or groups 
of gaming terminals so that a relatively small number of 
the gaming terminals are disabled (for reprogramming) 
at any one time. Additionally, the invention allows for 
download to multiple gaming devices or peripheral 
devices simultaneously. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0019] 

Rg. 1 A is a block diagram depicting components of 
a multi-terminal gaming system, including compo- 
nents of a gaming terminal, of a type which may be 
used in connection with the present invention. 

Rg. 1B is a block dagram of a plurality of gaming 
terminals, each coupled to a plurality of peripheral 
devices, and a central computer coupled to the 
gaming terminals which can be used according to 
an errdDodiment of the present invention; 

Rg. 2 is a flow chart of a procedure for downloading 
information accordtr^ to an enrtoodiment of the 
present invention; 

Rg. 3 is a block diagram of gaming terminals linked 
to a central system, usable according to an emt)od- 
iment of the present invention; 

Rg. 4 is a block diagram of a gaming tern^nal 
assembly and development system usable in 
accordance with an emt>odiment of the present 
invention; arid 

Rg. 5 is a flow chart depicting a download proce- 
dure in accordance with an embodiment of the 
present invention. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENT 



[0020] Although the present invention can be used 
in connection with many types of gaming terminals 
either as stevid-alone devices or coupled in any number 
of different multi-terminal configurations, one example 
of a gaming terminal 112a coupled, along with other 
gaming terminals 1 12b,c, via one or more local control- 
lers 114a.b.c to a central computer 116 is depicted in 
Fig. 1A. In the emljodiment of Fig. 1 A. gaming terminal 
112a (and, typically, ail gaming terminals in the group) 
includes a game controller board 122 which will typically 
include, among other items, a microprocessor and a 
memory such as an EEPROM storing programming 
and/or other information for controlling an operation of 
the controller board 122. Typically the hardware and 
software of the game controller t)oard 122 will contain 



the information defining the type of game and making 
determinations of the win/loss local outcome (as 
opposed to, e.g., a progressive win/loss outcome) for 
the gaming terminal 1 12a. Becai^e of the central role of 
5 the game controller board 1 22 in determining any mon- 
etary payout, it is particularly important to assure the 
presence of the conrect software for the game controller 
t>oard to avoid improper or incorrect payouts and to 
assure compliance with local regulatory authorities. 
70 Although it is possible to combine numerous functions 
onto a given board, typically numerous boards will be 
provided in a gaming terminal for forming a plurality of 
functions. In the depicted emlxxliment, the game con- 
troller tx>ard communicates with a communications 
75 board 124 which provides information to and, receives 
the information from a local controller 114 and/or central 
computer 1 1 6, for purposes such as monitoring use and 
performance. assuring conrpliance, performing 
accounting and similar functions, and facilitating imple- 
20 mentation of progressive or other multi-terminal based 
games or prizes. In one embodiment, the communica- 
tions board 124 includes one or more ports by which a 
laptop 128 or oth©- computer may be coupled to the 
gaming terminal 112a for, among other purposes. 
25 downloading as described more fully below. In the 
embodiment of Rg. 1 A. a plurality of peripheral boards 
128 a-d communicate with the game controller board 
122 and control various peripheral devices for perform- 
ing various functions such as bill acceptor functions 
30 132a. coin handling functions 132b, video functions 
1 32c and audio output functions 1 32d. In many configu- 
rations, some or all of the peripheral and other boards 
128 a-d. 124 will contain EEPROMs or other devices for 
storing software for running on microprocessors or 
35 other computing devices on such tx>ards. 

[0021] As depicted in Fig. IB. a conputing device 
such as one or more gaming terminals 1102a, 1102b 
may be coupled to various peripheral devices 
1 104a.b.c,d.e.f. Many types of peripheral deices can be 
40 provided, including the currency acceptor as depicted 
including, for example, printers, display screens or 
devices, keypads and the like. More than three periph- 
eral devices may be provided, or fewer may be pro- 
vided, the gaming terminal or other computing device 
45 may be housed in the same housing 1 106a. 1 106b as 
the peripheral devices 1 104a-f, arKi more than two gam- 
ing devices may be used in connection with the down- 
load procedure. In one embodiment, download of 
information to the gaming terminals 1102a, 1102b fe 
50 provided from a central computer 1108. However, it is 
possible to use the present irrvention in connection with 
stand-alone gaming terminals and peripherals which 
are not connected to a central computer 1 108. 
[0022] In the depicted embodiment, each gaming 
55 terminal includes a processor 1 1 1 0a. 1 1 1 0b. a memory 
1112a. 1112b. and a communications module 1114a. 
1 1 1 4b. In the depicted embodimait, the processor 1110 
is coL?)led to both the memory 1112 and the communi- 
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cations module 1114 and the moiwy and awnmunica- 
tions nnodules 1114. 1112 are coi^led together to 
permit communication therebetween. In one embodi- 
ment, the processor 1110a is an Intel processor model 
80960. although the invention can be used in connec- 
tion with computing devices having other types of proc- 
essors and in connection with gaming terminals ufhich 
are controlled by devices other than microprocessors 
such as ASICS. 

[0023] Following the establishment of the communi- 
cation link 206. (Rg. 2) Information is transferred from 
the information source to one or more gaming terminals. 
In one enrtoodiment. if desired, the infbnmation is 
encrypted before being transmitted to the gaming termi- 
nal, particularly if the information is transmitted over a 
local area or wnde area network to avoid the possibility 
of unscrupulous individuals gaining access to the infor- 
mation. Many types of data transfer can be used includ- 
ing serial and parallel transfer. In one embodiment, the 
information which is downloaded may include informa- 
tion within more than or different from information to be 
used for reprogramming the memory of one of the cou- 
pled peripherals. For example, the downloaded informa- 
tion may contain new programming information for two 
or more different peripherals coupled to a gaming termi- 
nal and/or may include information for programming the 
gaming terminal Itself, in addition to. or rather than, one 
or more of tiie peripherals. 

[0024] In the strict regulatory environment for many 
gaming devices, it is typically necessary to provide 
assurance tiiat approved and proper software is pro- 
vided in the peripheral and other boards, in addition to 
that provided on the game controller board. 
[0025] Fig. 3 depicts an emtxxJiment in which a net- 
work interface system 312 is used to connect a gaming 
terminal 1 12a. which may in turn be connected, such as 
in a daisy-chain fashion, to other gaming terminals 
112b, 1 12c in a group, via a cluster controller 314 to a 
local server or controller 114. In the depicted emtxxli- 
ment, the gaming ternrrinal 112a includes a central or 
controller (CPU) board 122 and one or more peripheral 
controller boards 128e, 128f. Although the present 
invention can be used in connection with a wide variety 
of systems and applications, in the depicted embodi- 
ment, while the gaming terminals 112 a-c would typi- 
cally be located in a gaming area such as a gaming 
region of a casino, the local servers 1 14 and associated 
devices wouW typically be located in a casino local 
office 318. The local server 114 {arrcl, in some embodi- 
ments, additional local servers for the same or other 
casinos) may be coupled, e.g. via modems 322a. 322b 
over a LAN line or wireless link 324 to a central compu- 
ter 1 16 typically located in a central office 325 different 
from the local office 318 of the casino. As depicted, pref- 
erably each gaming terminal 112 also includes a port or 
other connector for coupling a computer such as a lap- 
top conrputer 128 e.g. via a fiber-optic, cable or other 
connector 326. Thus, as illustrated in Rgs. 1A. IB and 



3. transferring progBmming data or other information 
according to the present invention may be used in con- 
nection with transferring information from a remote loca- 
tion such as a central computer 1 16 or. in some cases. 

5 local server 1 14 to a gaming terminal 1 12. This proce- 
dure provides the desirable ability to dowvnload pro- 
grams or other irrformation to one. some, all or various 
corrt^inations of the gaming machines I12a-c con- 
nected to the network, preferably substantially simulta- 

10 neously. if desired. Such an ability is particularly useful 
when the target devices 112 may be relatively numer- 
ous, such as in the case of a casiro or multi-casino net- 
work and/or when target devices are spread across a 
relatively wide region such as a plurality of lottery termi- 

75 r^s. The download rates in such a system would typi- 
cally be governed by the communication rates of the 
network or telecommunication system 324, 312. Also as 
depicted in Figs. 1 A and 3, it is possible, in addition to or 
in place of downloading from a central computer or local 

20 controller, to ctowmload from a computer, such as a lap- 
top 128, coi^led directiy to a gaming terminal. In one 
embodiment, the laptop conrputer 128 is coupled by a 
fiber-optic connection 326 directly to tiie game control- 
ler board 122. If tiie programming data or other infer ma- 

25 ton is intended for storing on a peripheral controller 
(end use device a-Q the data, in this embodiment, is 
channeled through tiie game controller board (in a 
pass-through mode) to the peripheral controller board, if 
desired. This procedure can be used. e.g.. on a casino 

30 floor (for repairing or updating gaming terminal soft- 
ware) at a lottery location, or in tiie manufacturing proc- 
ess, such as in a final assembly stage. Preferably, such 
a download metiiod does not require peripheral control- 
lers 128a-f or other lx>ards or components to be 

35 removed from tiie machine and can be used on 
machines that have no suitable network interface 312. 
[0026] In addition to downloading programming or 
other information to gaming terminals or similar devices 
at a casino location, the present invention can also be 

40 used in connection with downloading information during 
a gaming terminal or similar device manufacturing proc- 
ess. Fig. 4 depicts a system usable In sut^assembly or 
final assembly downloading, e.g., in a gaming terminal 
marttjfacturing environment. Fig. 4 includes a plurality of 

45 comiiHJters such as workstation computers, network 
server computers, and/or PC-type computers coupled 
by network lines and a firewall 452 in a manner well- 
known to those of skill in computer network technolo- 
gies. 

so [0027] At various stages in employing the system of 
Fig. 4, programming data or other information is stored 
in a number of different storage systems such as data 
bases (typically providing storage on hard drives or 
other well-known storage media). In the depicted 

55 emtDodiment. information, during program design proc- 
ess, is held in an engineering database 454. And soft- 
ware and firmware engineers use and nxxJify such 
information via conputers 456, 458 having at least indi- 
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rect access to engineering database 454. Preferably, 
programs or other data which are still in the develop- 
ment phase are restricted to the engineering database 
454 arxJ are not stored in other databases. At some 
point, errgineering will release the program or other 
intormatKXi to product assurance 462 which, after 
review, will sUxrtitthe programming or data to a gaming 
junsdictton tor approval. After the program or data is 
approved by the gaming jurisdiction, the program is cop- 
ted t a production download server 466 and, preferably, 
stored in a released database 468. Inlbrmation about 
the approved program is provided to a customa* order 
system 472 and other systems such as engineering 
474a and product assurance 474b. Although released 
programs nnay be provided in various forms such as on 
CO ROM 476a via a CD duplicator 476b. Fig. 4 also 
illustrates a system for downloading programming data 
or oth«r viiormation as part of a gaming terrrdnal 
assembly or tabrcation system. The programming or 
data may be loaded onto boards or other sut>assem- 
tslies 478. e 0 via a trar^ator/p>ower assembly 482 and 
download termnal 484 or may be loaded Into one or 
more gammg terminals 486a.b. e.g. via connection to a 
communcatior board for downloading, in turn, to target 
peripheral devices or other subassemblies within the 
gaming termrats 486a. 486b, e.g. via a download ter- 
minal 488 

[0028] Downloading on the fabrication or assembly 
line, as depcted Fig. 4 in the strict regulatory environ- 
ment for many gaming devices, it is typically necessary 
to provide assurarx^e that only approved and proper 
software arvJ data is used in the gaming terminals, 
including perpheral and other boards (in addition to that 
provided on. e g . the game controller board). Depend- 
ing on the nature of the download, it will be advanta- 
geous, in performing assemt>ly line downloading, to 
recognize or distinguish different boards, e.g. to obtain 
information regarding characteristics of the Board 
and/or its identity or history 

[0029] In the environment of the system of Fig. 4, a 
host device such as the download terminal 484 con- 
nects directly to the sut>assemt}ly or through a test box 
482 that provides the physical connection and power. A 
download terrrir^l 488 can also be used to download 
information to tx>ards which have already been assem- 
bled into gaming terminals 486a,b (which, provide phys- 
ical connection and power and thus can be used for 
downloading without a test l>ox 482). The host device 
484. 488 can t>e network-connected as depicted or can 
be a standalone device. In a standalone corrfiguration, 
the program information can be stored on a CD ROM 
476a or other storage medium. The depicted download 
system can be used on the production floor as depicted 
or, at a service bench, e.g. for repair purposes. Prefera- 
bly the download media 492a, 492b are configured to 
facilitate downloading of information (as opposed to. 
e.g.. the components 312. 324 of a casino or multi- 
casino system which may be configured for other pur- 



poses such as data gathering, progressive game sys- 
tems and the like) and can tiius tDe configured or 
optimized to achieve relatively high rates of data trans- 
fer. 

5 [0030] In order to facilitate security in downloading 
information, preferably so as to achieve approval for 
such downloading by gaming regulatory tx>dies, a 
downloading process as depicted in Fig. 5 may tDe used. 
According to the process of Fig. 5. an initial or early 
10 stage of the process involve identification. Although it 
may be possit^le to configure gaming terminals to pro- 
vide identification using only software procedures (such 
as by providing encrypted identification data, hand 
shaking procedures and the like), according to one 
15 emtxxjiment. it is pretended to provide a gaming terminal 
with one or more hardware-t>ased identification compo- 
nents such as one or more one-time programmable 
and/or add-only memory devices for storing information 
which identifies or characterizes the gaming terminal or 
20 components thereof. In one embodiment, a gaming 
identification apparatus and system can be used in 
accordance with that descrit>ed in U.S. Patent Applica- 
tion Serial No. (Attorney File No. 

3735-924) for "GAMING DEVICE IDENTIFICATION 
25 METHOD AND APPARATUS" filed on even date here- 
with and incorporated herein by reference. Provrcling 
one or more gaming terminals with such identification 
capability means that such gaming terminals have been 
placed in a "download ready" configuration according to 
30 an embodiment of the invention. 

[0031] As depicted in Fig. 5. in the identification 
phase, the source device sends a message to the target 
device requesting identification information 512. When 
downloading is intended to download information to two 
35 or more devices, the identification (and/or the down- 
load) can be performed serially, by polling each device, 
or a single request addressing all target devices may be 
sent. If the identification response is not received 514. 
the system enters a failure mode and no connection is 
40 established 516. The identification response which is 
accqptat^e can include many types of information, 
examples of which include serial or other hardware 
identification numbers, manufacturing ID information or 
codes, manufacturer name, hardware or software revi- 
45 sion designations, date of manufacture, installation, 
sale, shipping and the like, date of software revision, 
software file size, memory addresses and the like. Pref- 
erat^y, a starting address for the program to be down- 
loaded is returned. Preferably, data integrity information 
so such as a CRC (cyclic redundancy check) signature is 
returned. The identification information returned in 
response of the request 512 is used to verify that the 
information to be downloaded arxl/or the download pro- 
cedures (such as data transfer rates) are appropriate for 
55 the hardware and softmre present in the target 
devices. For example, the returned identification infor- 
mation can be used to verify tiiat the gaming jurisdiction 
to which the gaming terminal is subject, has approved 
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the software which is to be downloaded, that the soft- 
ware which is to be downloaded Is compatible with soft- 
ware or hardware already pr^ent in the gaming 
terminal and the like. If. on the basis of the identification 
information, it is determined that the gaming terminal 
already possesses the download information, the down- 
load step can be skipped. 

[0032] Following the identification phase, a negotia- 
tion phase includes the sending of a negotiation mes- 
sage 518. The negotiation message includes 
information which is used to enat>le or facilitate the 
download procedure For example, it may be necessary 
to infof m the target device of the location or locations in 
memory where the downloaded information is to be 
stored, the size of the download file, the data transfer 
rate, whethet any special transfer procedures such as 
compression, decompression, encryption, decryption 
and the fake, are required. Preferably the negotiation 
message ndudes (or is interpreted to include) a 
request tor a response such as an approval response, 
from the target device or devices. For example, waiting 
for approval from the target device is useful to. e.g.. 
avoid inrttating a downk>ad when there Is someone cur- 
rently playing the game, or when the gaming terminal is 
in an error mode In one embodiment, if there are cur- 
rent credits on a garrtng terminal, the gaming terminal 
is assumed to be in an actively played state. As 
depicted in Fig 5. if the approval or "ready" response 
522 is not received, a failure state is declared and en^or- 
handlrng procedures are required, such as outputting a 
notification to an operator and/or reinitiating the down- 
load procedure If the ready response is received, the 
download phase can begin. 

[0033] In the embodiment of Fig. 2, the data is 
transmitted in a t)iock fashion, i.e.. by transmitting a pre- 
determined number of bits of the information (such as 
1024 bits) from the source to the gaming terminal 208, 
and tiien checking tor errors in the block 210. As will be 
well-known to ttx)se of skill in the art, other trfock lengths 
can also be used Preferably, the data is transmitted by 
a serial transmission protocol. In one emtxxjiment, ver- 
ification or other checking is performed to assist in 
detecting data transmission or other errors. A number of 
well-known verification or error detection schemes can 
be used, such as a CRC. One type of CRC check is 
desCTibed in U.S. Patent Application Serial No: 
08/348,268. filed November 30. 1994. for "METHOD 
AND APPARATUS FOR VERIFYING THE CONTENTS 
OF A STORAGE DEVICE" (incorporated herein by ref- 
erence). These or other verification or error checking 
schemes can be adapted for use in the present inven- 
tion in a manner that will be apparent to those of skill in 
the art. after understanding the present disclosure. 
[0034] If there are errors detected in the block of 
information (using, e.g. a cyclk; redundancy check error 
detection routine, or other error detection routines well- 
known to those of skill in the art), the procedure loops 
t>ack 212 to retransmit the block. Preferably, after some 



tslocks have been successfully downloaded, errors in 
sut>sequent blocks do not necessarily require reinitiat- 
ing the download from the beginning but, only requires 
downloading, anew, those blocks which have not this 

5 far been successfully transmitted. In one embodiment, 
only a limited number (e.g. 3) of the re-tries are permit- 
ted before a "total en^or is declared and. e.g., the device 
is put out of senrtca At the end of each block transmis- 
sion, it is determined 528 whether all blocks have been 

10 transmitted 214. If not. the procedure loops t>ack 216 to 
transmit the next block. Preferably, following the CRC or 
other en^or detection for each blocK an overall CRC or 
other error check (e.g. digital signature) is performed 
after all blocks have been downloaded to the gaming 

15 terminal. Thus, at the end of the first portion of the pro- 
cedure 202. the entire desired information will have 
been transmitted, block-wise, with error detection, from 
the information source 1 08 to at least one gaming termi- 
nal 102. 

20 [0035] After all blocks have been successfully 
downloaded, a verification stage Is initiated by sending 
a message to the target device (or devices) which 
requests certain verification information 532. In one 
enrrt50diment, the verification information is based on 

25 (such as being calculated from) information stored in 
the target device, and preferably including at least some 
of the downloaded information. For example, a CRC or 
other digital signature based on some or all of the down- 
loaded information can be used. Preferably, the portion 

30 of the information vttiich is used as the basis for calcu- 
lating verification information or signature is selected in 
a fashion that is rrat readily known or predictable In 
advance or by unauthoriz^ persons. For example, 
rather than always calculating the verification signature 

3S based on information starting from a predetermined 
and/or unchanging starting address, it is preferred tiiat 
the verification signature be cateulated from a starting 
address which is different for different download opera- 
tions and/or different terminals. In one errtxxliment. the 

40 starting address is randomly selected and communi- 
cated (e.g. as part of the verification request message 
532). For further promoting confkience in the verifica- 
tion system, it is possible to use a digital signature cal- 
culation procedure which is based on a private key 

45 value which is preferably randomly selected by tiie 
source computer and used to encrypt part of the dovm- 
load information. In response, the gaming terminal uses 
a known procedure (such as a decryption calculation 
procedure) to calculate the verification signature. If the 

50 calculated verification signature matches the expected 
verification signature, verification is considered to have 
been accomplished. 

[0036] Upon receiving a valid verification 534, the 
download session can be completed. If a valid verif ica- 
55 tion is not obtained, a failure is declared 538 and an 
en-or-handling procedure can be initiated e.g. to provide 
notification to operators and/or reinitialize the download 
procedure. 
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[0037] As will be apparent to those of skill in the art 
after understanding the present disclosure, the particu- 
lar procedures illustrated in Fig. 5 may t>e modified or 
varied in a number of ways. For example, although it is 
believed a high and desirable level of security is 5 
achieved when all four phases (identtfication, negotia- 
tion, downloading and verification) are used, it Is possi- 
ble to provide for downloading procedures in which one 
or more of the phases is eliminated or at»breviated. For 
exampi . it would be possible to provide for a somewhat 10 
secure download procedure without including a va-if ica- 
tion step. Additionally, the download method according 
to th present invention is not necessarily strictly limited 
to the order of steps illustrated in Fig. 5. For exanrple, it 
may t>e possible to perform some or all negotiation 15 
steps prior to some or all identification steps. Some or 
afl of the steps or phases described in connection with 
Fig 5 can t>e used in connection with purposes other 
than downloading, such as using identification and/or 
vertf cabon transactions to query arxi check loaded pro- 20 
grams e g by regulatory agencies. 
10038] In light of the above desaiption a number of 
advantages of the present invention can be seen. The 
present invention makes it feasible to reduce or elimi- 
nat the r>eed for manual operations (such as physically 2S 
visitno. and opening gaming terminals, ar^lyzing, test- 
ing and/or replacing t>oards or components) in connec- 
tion wnth program updating, replacement, modification 
and the bke. while maintaining a high level of security 
and reliability. The present Invention provides the ability 30 
to query a ganr^ng terminal to obtain hardware and soft- 
ware ^ilbrmation for regulatory, niaintenance, repair, 
inventory, and similar purposes. The present invention 
makes it feasible to download information to one or 
many machines at the same time. The downloaded 3S 
information may be Information particularly directed to 
peripheral devices (such as a updating a fc^ill acceptor 
program) and/or may involve changing features of a 
game such as upgrading or adding a tx>nus game or 
similar feature to a gaming terminal. The present inven- 40 
tion is useful in facilitating the standardization of pro- 
gramming or other data across a variety of gaming 
terminals. The present invention provides the ability to 
permit local customers such as individual casinos or 
similar locations, to download their own customized 45 
vkJeo and/or audio files (e.g., using the security features 
describ d to provide regulators with assurance that 
downloading of such files will not change or result in 
unacceptable modifications to other features of game 
operation). The present invention facilitates the ability of sc 
casinos, game operators, game manufacturers and the 
like to obtain and maintain accurate inventories on pro- 
grams and board modules in gaming machines. The 
present invention facilitates locating or identifying par- 
ticular printed circuit boards (or particular classes or si 
types of PCBs or ther components on a casino floor). 
The present invention facilitates the secure and reliable 
automata electronic loading of programs into machines 



in a manufacturing (assembly line) environment e.g. 
t>ased on ci^tomer orders, with reduction or elimination 
of manual steps in such process. The present invention 
facilitates querying and verifying the presence and 
nature of hardware or software conrponents thereof e.g. 
at the end of an assentriy or fabrication process such 
as before shipping to customers, upon receipt, and the 
like. The present invention facilitates a verification of 
installed programs e.g. by gaming and/or tottery regula- 
tory agencies. 

[0039] Providing downloading from a central com- 
puter to individual gaming terminals has a number of 
advantages. The download can be easily performed on 
a number of gaming terminals at the same time, so that 
the amount of time required to perform the download for 
all the various gaming terminals is reduced. Further, it ts 
not necessary to have personnel physically walk from 
terminal to terminal, and perform a download at each 
terminal, so that latter costs are also reduced. 
[0040] The present invention makes it possible to 
provide for new or ^ditional programming for peripheral 
devices in a manner which is secure, less labor inten- 
sive, less time-consunrptive, and less obtrusive than 
previous methods. The pres^ invention makes it pos- 
sible to download the programming to a plurality of gam- 
ing terminals (or other computing devices) substantially 
simultaneously. 

[0041] A number of variations and modifications of 
the invention can also be used. In addition to download- 
ing computer program information, the invention can be 
used to download data such as data which defines the 
manner in which peripherals accept currency (or, detect 
counterfeiting). In addition to a central computer and a 
portat)le conputer hand-held device, the information 
may be downloaded to the gaming terminal from other 
devices, such as a cluster controller. When reprogram- 
ming of two or more peripherals attached to a given 
gaming terminal is desired, in one emtxxJiment, the new 
programming information for each peripheral to k^e 
reprogrammed is downloaded to the gaming terminal 
and the gaming terminal begins downloading the infor- 
mation to the attached peripherals preferably only after 
all information has been downloaded to the terminal. In 
this way, only a single session of downloading to the 
gaming terminal is needed in order to provide eventual 
updating of two or more coupled peripherals. 
[0042] In situations in which security is a concern, 
such as systems in which money handling occurs (e.g.. 
gaming terminals, lottery terminals, and the like) the 
information may be encrypted when it is transferred to 
the computing device and is decrypted either in the 
gaming device or in one or more peripheral devices. 
[0043] Preferafcdy the transactions are controlled 
and monitored automatically e.g. using an information 
file generated from information from firmware, mechan- 
ical, configuration, jurisdiction approvals and production 
bill of n^terials. Preferably such an information file is 
always encrypted, although program or other download 
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data can be compressed and/or enaypted e.g. depend- 
ing upon jurisdiction requirenienls. In one embodiment 
the information file contains a number of fields including 
the filename, source directory or path, destination direc- 
tory, version number or other version designator. CRC 5 
value, platform code (e.g. indicating the type of gaming 
terminal), target code (e.g. indicating the type of periph- 
eral (e.g. bill validator)), agency approval(s). and game 
name or other game indicator 

[0044] Although the procedures and steps illus- 10 
trated and described in connection with Rg. 5 are 
believed to provide a high level of security, it is believed 
that security of the entire system is particularly 
enhanced by the contjination of the identification, espe- 
cially hardware and/w memory-based identification 15 
(residing on the gaming terminal or gaming terminal 
conponents) and the procedures and steps illustrated 
in Fig. 5. particularly when combined with an informa- 
tion file as described. 

[0045] In the embodiment of Fig. 1 B it is possible to 20 
download the infornration to two or more gaming termi- 
nals 102a, 102b, substantially simultaneously. However, 
in some configurations, it will be necessary to suspend 
use of the gaming terminal during the downloading 
process. In this case, it may not be desirable to suspend 2S 
operation of all gaming terminals at the same tme. 
Therefore, in one embodiment information is down- 
loaded from the central computer 1 08 to a first subset of 
the connected gaming terminals (during which time, use 
of that subset of gaming terminals Is suspended), and 30 
following downloading to that subset of gaming termi- 
nals the first set of gaming terminals will be available for 
normal use, and downloading to the second subset of 
gaming terminals will be initiated, suspending use of the 
second subset of gaming terminals during downloading 35 
thereof. The process is repeated for various subsets of 
the gaming terminals until the information has been 
downloaded to all desired gaming terminals. In some 
situations, it niay be desired to download information 
only to some of the connected gaming terminals. For 40 
example, if the information to be downloaded is 
intended to thwart passing of $10 counterfeit bills, there 
would be no need to download the new information to 
gaming terminals which are connected to currency 
acceptor peripherals that accept only $5 bills. as 
[0046] In the embodiment depicted in Fig. 1B. each 
gaming terminal 1102a. 1102b is coupled to a central 
computer 11 08. The coupling may be by communication 
link 1124. such as a common local area network con- 
nection (e.g., Ethernet. Token Ring. LocalTalk, etc.), a so 
wide area network and the like, using any of a variety of 
physical media such as cables, optical fibers, radio, 
infrared or other wireless links and the like. The type of 
communication module 1 1 1 4a. 1 122, which will be used 
depends on the type of communication link which is ss 
being used and may include, e.g., commercially-availa- 
ble network boards and supporting software, moden^, 
universal asynchronous receiver/transmitter (UART) 



devices and the like. 

[0047] As noted above, in some coifigurations it 
may be necessary to suspend operation of the gaming 
terminal during downloading from the information 
source to the gaming t^-minals, and/or from the ganrting 
terminal to the peripheral. In one errtoodiment, the gam- 
ing terminal will provide an indication of the suspended 
^atus. so that a user will have the option to move to a 
differem gaming terminal or to await reactivation. In one 
embodiment the display 103 wiD provide an estimate of 
the amourtt of time before reactivation of the terminal. 
This estimate can be based, if desired, on an entpiri- 
cally-denved relationship between the average ctown- 
load time and the number of blocks of information to be 
downloaded, (or other indication of the size of the infor- 
mation to be downloaded). 

[0048] In situations in which operation or use of the 
gaming terminal must be suspended while the informa- 
tion is being downloaded to peripherals, it may be desir- 
able to configure the gaming terminal to wait until there 
is an apparent idle period on the gaming terminal before 
commencing downloading to a peripheral. Thus. In tiie 
procedure of Rg. 2, tiie gaming terminal will determine 
wheth^ it has been idle for at least a predetermined 
minimum period (such as about one minute. 220). for 
example, when the gaming terminal is an electronic slot 
machine, the gaming terminal can use at timer circuit to 
determine if there has been any wager placed or any 
handle-pull or electronic equivalent thereof) for the pre- 
determined period. If the gaming terminal has not been 
idle for at least the predetermined period, the gaming 
terminal will optionally wait anotiier predetermined 
period 221 (such as about one minute) before testing to 
determine if the gaming terminal is idle. Once the gam- 
ing terminal is idle, the gaming terminal can commence 
procedures to transmit information to appropriate 
peripherals 224. preferably in a blockwise fashion, witii 
erra checking. 

[0049] The present invention, in various embodi- 
ments, includes componerrts. methods, processes, sys- 
tems and/or apparatus substantially as depicted and 
described herein, including various emtxxJiments, sub- 
combinations, and subsets thereof. The present irven- 
tion, in various emtxxiiments, includes providing 
devices and processes in the absence of items not 
depicted and/or described herein or in various embodi- 
ments hereof, including in the absence of such items as 
may have been used in previous devices or processes, 
e.g. for achieving ease and reducing cost of implemen- 
tation. 

[0050] The foregoing discussion of the invention 
has been presented for purposes of illustration and 
description. The foregoing is not intended to limit the 
invention to the form or forms disclosed herein. 
Although the description of tfie invention has included 
description of one or more embodiments and certain 
variations and modif icaticwis, other variations and modi- 
fications are within the scope of the invention, e.g. as 



15 



20 



2S 



30 



35 



40 



9 



17 



EP 1 004 970 A2 



18 



6. A method, as claimed in Claim 1 , wherein said data 
includes data for programming at least a first pro- 
grammable memory chip. 

5 7. A method, as claimed in Claim 1 . wherein said step 
of transmitting said data from said source to said 
gaming device uses a serial data transmission pro- 
tocol. 

10 8. A method, as claimed in Claim 1 . wherein said step 
of calculating a signature comprises calculating a 
signature based on data stored in a memory, begin- 
ning with a random address in said memory. 

15 9. A method, as claimed in Claim 1 , wherein said step 
of calculating a signature comprises calculating a 
signature using a seed value, wherein said seed 
value is available to both said source and said gam- 
ing terminal. 

1 0. Apparatus for downloading data from a source to a 
gaming device, wherein said gaming device is sub- 
ject to governmental regulations, the apparatus 
comprising; 

25 

means for transmitting first information to said 
source, identifying at least a first hardware 
component of said gaming device: 



may be within the skill and knowledge of those in the art, 
after understanding the present disclosure. It is 
intended the appended claims be construed to include 
alternative emtxxliments to the extent permitted. 

Claims 

1 . A method for downloading data from a source to a 
ganring device, wherein said gaming device is sub- 
ject to governmental regulations, the method com- 
prising; 

transmitting first information to said source, 
iderrtifying at least a first hardware component 
of said gaming device; 

verifying that said data Is appropriate for said at 
least f rst hardware; 

trartsrrvtting second information from said 
source to said gaming device describing at 
least a first characteristic of said download; 

transmitting third Information from said gaming 
device to sad soiffce indicating that said gam- 
ing device is configured to receive said down- 
load; 

transmitbng said data from said source to said 
gaming device; 

calcUating a signature based at least partially 
on said data and transmitting said signature to 
said source; and 

conrparing said signature with a signature 
availat)le to said source. 

2. A method as clamed in Claim 1 wherein said first 
information includes information identifying soft- 
ware stored on said gaming device. 

3. A method as darned in Claim 1 further comprising 
outputting a message when said first Information 
indicates said data is already stored on said gaming 
device. 

4. A method as claimed in Claim 1 wherein said gam- 
ing device includes a plurality of circuit boards, and 
wherein said source is coupled to a first of said cir- 
cuit boards and wherein said first information iden- 
tifies hardware on at least a second of said circuit 
boards. 

5. A method as claimed in Claim 1 wherein said gam- 
ing device includes a plurality of circuit boards 
which contain a non-programmable mennory storing 
hardware identification information. 



30 means for verifying that said data is appropri- 

ate for said at least first hardware; 

means for transmitting second information from 
said source to said gaming device describing at 
35 least a first characteristic of said download; 

means for transmitting third information from 
said gaming device to said source Indicating 
that said gaming device is configured to receive 
40 said download; 

means for transmitting said data from said 
source to said gaming device; 

45 means for calculating a signature based at 

least partially on said data and transmitting 
said signature to said source; and 

means for comparing said signature with a sig- 
50 nature available to said source. 

11. Apparatus as claimed in Claim 10 wherein said first 
information includes information identifying soft- 
ware stored on said gaming device. 

55 

12. Apparatus as claimed in Claim 10 further compris- 
ing means for outputting a message when said first 
information indicates said data is already stored on 
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said gaming devic& 

13. Apparatus as daimed In Claim 10 wherein said 
gaming device includes a plurality of circuit boards, 
and vsrherein said source is coupled to a first of said s 
circuit boards and wherein said first information 
identifies hardware on at least a second of said cir- 
cuit boards. 

14. Apparatus as claimed in Claim 10 wherein said io 
gaming device includes a plurality of circuit boards 
which contain a non-programmat)le memory storing 
hardware identification information. 

15. Apparatus, as claimed in Qaim 10, wherein said is 
data includes data for programming at least a first 
programmable memory chip. 

16. Apparatus, as claimed in Qaim 10. wherein said 
means tor transmitting said data from said source 20 
to ssitd gaming device uses a serial data transmis- 
sion protocol 

17. Apparatus, as claimed in Qaim 10, wherein said 
means tor caicutating a signature comprises means 2S 
for calculating a signature based on data stored in a 
memory, beginning with a rarxJom address in said 
memory. 

18. Apparatus, as claimed in Qaim 10, wherein said 30 
means tor calculating a signature comprises means 

for calculating a signature using a seed value, 
wherein said seed value is available to both said 
source and said gaming terminal. 

35 

19. Apparatus, as claimed in Qaim 10. wherein said 
means for calculating a signature comprises means 
tor calcutatng a digital signature t>ased on data 
stored in memory using a public key encryption 
decryption algorithm. 40 
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